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SUBSTITUTE SPECIFICATION 
(ANNOTATED TO SHOW MARKED CHANGES) 

METHOD AND DEVICE FOR ACCESSING A MOBILE SERVER 
TERMINAL OF A FIRST COMMUNICATION NETWORK BY MEANS 
OF A CLIENT TERMINAL OF ANOTHER COMMUNICATION 

NETWORK 

CROSS-REFERENCE TO RELATED APPLICATION 

This Application is a Section 371 National StaRe Application of 

International Application No. PCT/FR2004/002786, filed October 28, 2004 and 
5 published as WO 2005/043847 on May 12. 2005, not in English. 

FIELD OF THE DISCLOSURE 

Fi e ld of th e inv e ntion 

The inv e ntion disclosure relates to the field of wireless applications. 

Th e t e rm wir e l e ss application r e f e rs, according to a commonly accept e d 
10 d e finition, to any typ e of r e al tim e on board application s r e quiring, for 
communication, a conn e ction to a wir e l e ss and/or mobil e n e twork, such as a 
GSM, GPRS, and/or UMTS n e twork, for e xampl e , other than mobil e t e lephone 
and "hands - fre e " applications. 

Mor e sp e cifically, th e inv e ntion r e lat e s to mobil e s e rv e r t e rminals 
15 e x e cuting such wir e l e ss applications int e nded to mak e various typ e s of 
information and/or diff e r e nt typ e s of s e rvic e acc e ssibl e to oth e r stationary and/or 
remote mobile cli e nts. Th e s e diff e r e nt typ e s of s e rvic e s can e ith e r b e sp e cific and 
r e lat e to only a restrict e d group of individuals, or b e g e n e ral and/or public, and 
thus b e pot e ntially acc e ssibl e to any individual (W e b pag e consultation on the 
2 0 Int e rn e t, for exampl e ). 

Thus, th e invention appli e s The disclosure relates in particular, but not 
exclusively, to access by a stationary or mobile client terminal to a mobile server 
terminal, in order to use services and/or consult or update data, made available by 
the mobile server terminal. 
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By way of an illustrative and non limiting e xample, th e inv e ntion thus 
applies in particular but not e xclusiv e ly to fi e lds as vari e d as: 
tho automotiv e industry; 

point to point — applications — sueh — as — machine to machin e — (M2M) 

5 applications; 

t e l e m e dicin e applications on board mobile terminals; 

the consultation of W e b pag e s mad e available by a mobil e s e rv e r terminal 

Prior art 

BACKGROUND 

10 Today, mobile server terminals, such as mobile telephones or other 

portable radiocommunication terminals, are increasingly being used. The use of 
such mobile server terminals is, however, significantly limited by the fact that 
they must necessarily be connected to a private mobile network and that they can 
therefore be accessed only by stationary or mobile client terminals also connected 

15 to the same private network. 

Indeed, it should be specified that any mobile communication network is 
made highly secure by means of one or more firewalls. Therefore, it is not 
possible to directly access a mobile server terminal that is connected to such a 
mobile communication network protected by this or these firewalls, from a 

20 stationary or mobile client terminal that does not belong to this same mobile 
network. 

More specifically, and as shown in figure 1, no mobile server terminal 10 
of a public land network 1 1 of an operator (PLMN for Public Land Mobile 
Network) can be accessed from a client terminal 13 of another external network 
25 14, (the Internet, for example). Thus, only a client terminal belonging to the same 
public land network as a mobile server terminal can access and/or use the services 
of this mobile server terminal. Three primary technical constraints promote this 
situation: 

first, on a public land network 1 1 of an operator (PLMN), any BP (Internet 
30 Protocol) address for identifying a server terminal is dynamically 

allocated. This dynamic IP address therefore exists only on the public land 
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network having allocated it. It is therefore known only to the client 
terminals belonging to this same private public network, which are the 
only ones able to access and/or use the services of said mobile server 
terminal; 

then, on a public land network of an operator (PLMN), a mechanism 15 for 
optimising the number of IP addresses used is implemented, which has the 
function of translating each public communication port solicited on the 
network into a private communication port only recognised by this 
network. Such a mechanism 15, more commonly known by the term NAT 
(for Network Address Translator) thus enables a private identifier to be 
dynamically allocated to each of the applications executed by each of the 
mobile server terminals of a single public land network; 
finally, in the great majority of cases, the configuration of the firewalls 16 
intended to protect a public land mobile network 1 1 is designed so as to 
prohibit any incoming TCP/IP (for Transmission Control Protocol/ Internet 
Protocol) request 18. 
Obj e ctiv e s of th e inv e ntion 

Th e obj e ctiv e of th e inv e ntion is in particular to ov e rcom e thes e primary 

disadvantag e s of th e prior art. 

Mor e sp e cifically, an obj e ctiv e of the inv e ntion is to provide a t e chniqu e 

making it possibl e to communicat e with a mobil e s e rv e r t e rminal from a first 
public land n e twork (PLMN), from a stationary or mobil e cli e nt t e rminal of-a 
second public land n e twork, in spite of th e aforem e ntion e d technical s e curity 
constraints of said first n e twork. 

In oth e r words, an objective of th e inv e ntion is to provid e a t e chniqu e 

making it possibl e to acc e ss th e s e rvic e s and/or information of a mobil e s e rv e r 
terminal of a first public land mobile network of an op e rator, from a stationary or 
mobile cli e nt t e rminal not n e cessarily b e longing to the sam e first n e twork. It 
should b e noted that th e formulation of this problem, which also is contrary to th e 
conventional practic e of a p e rson skill e d in the art, is, per sc 9 a part of th e 
inv e ntion. - 



W5 1.12-00026 



4 



Anoth e r obj e ctiv e of th e inv e ntion is to provid e such a t e chniqu e that do e s 

not use th e conventional connection methods of the prior art essentially bas e d on 
TCP/IP requ e st exchang e s in ord e r to e stablish a communication s e ssion with a 
mobil e s e rv e r t e rminal, from a cli e nt term inal 

5 Anoth e r obj e ctiv e of th e inv e ntion is to provid e such a t e chniqu e that can 

int e grat e various l e v e ls of s e curity, in t e rms of initialisation of a communication 
s e ssion with a mobil e serv e r terminal of a first land communication network, and 
in terms of acc e ss to th e s e rvic e s and/or information of said mobil e s e rv e r 
t e rminal, from anoth e r stationary or mobil e t e rminal not b e longing to th e same 
10 first n e twork. 

An additional obj e ctiv e of th e inv e ntion is to provide such a t e chniqu e that 

also mak e s it possibl e to ov e rcome th e t e chnical s e curity constraints of th e prior 
art mention e d abov e in th e e stablishm e nt of a communication s e ssion betw ee n a 
mobil e s e rv e r t e rminal b e longing to a first public land network (PLMN) and a 
15 cli e nt t e rminal b e longing to anoth e r network, but wanting to acc e ss or us e th e data 
and/or s e rvic e s of said mobil e s e rv e r t e rminal. 

Y e t anoth e r objectiv e of th e inv e ntion is to provid e such a t e chniqu e that 

promotes — the — t e chnical — convergenc e — b e tw ee n — wir e l e ss — or mobil e — M2M 
applications and Int e rnet servic e s. 

20 A final obj e ctiv e of th e inv e ntion is to provid e such a techniqu e that is 

simpl e and in e xp e nsiv e to impl e m e nt. 
F e atur e s of the inv e ntion 

SUMMARY 

Th e s e obj e ctiv e s as w e ll as oth e rs that will be d e scrib e d b e low ar e 
25 achi e v e d by An embodiment of the present invention is directed to a method for 
access, by at least one client terminal connected to a first communication network, 
to the data and/or services of a server terminal connected to a second 
communication network, wherein the first and second networks can cohabit or 
form a single network. One of the problems solved by the inv e ntion an 
3 0 embodiment lies in particular in the fact that the server terminal is a mobile server 
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terminal. Thus, such a method according to an embodiment of the invention 
advantageously includes at least the following steps: 

initialisation initialization of a communication session by the client 

terminal with the mobile server terminal; 

establishment of the communication session by opening a direct 
communication tunnel between the client terminal and the mobile server 
terminal; 

so that said client terminal can consult information made available by the mobile 
server terminal and/or the client terminal can use and/or interact with all or some 
of the services of the mobile server terminal. 

The second communication network to which the mobile server terminal 
belongs is advantageously a wireless mobile communication network accessible 
via a security firewall. 

The step of initialisation initialization of the communication preferably 
includes at least the following steps: 

step A: sending a first TCP (Transmission Control Protocol) request from 

the client terminal to a domain name server; 

step B: reception by the client terminal of a response to the first request, 
which contains at least one set of predetermined parameters for connection 
to a first public proxy server belonging to the first communication 
network; 

step C: connection of the client terminal to the first public proxy server, by 
means of predetermined parameters, such as the IP address and/or 
communication port number; 

step D: transmission by the first public proxy server of a request to 
initialise a communication session to a second private proxy server 
belonging to the second communication network in the form of an access 
request signal; 

step E: sending a second TCP connection request by the second private 
proxy server, to a predetermined communication port of the mobile server 
terminal; 
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step F: transmission by the mobile server terminal of an acknowledgement 
of the second TCP connection request to the second private proxy server; 
step G: sending a third TCP connection request by the second private 
proxy server to a predetermined communication port of the first public 
proxy server; 

step H: transmission by the first public proxy server of an 
acknowledgement of the third TCP connection request to the second 
private proxy server; 

step I: transmission by the first public proxy server of an 
acknowledgement of the first TCP connection request to the client 
terminal. 

Thus, the successive sequence of these various steps advantageously 
makes it possible to initiate a communication session and to establish the opening 
of the direct communication tunnel between the client terminal and the mobile 
server terminal, wherein the tunnel passes through the security firewall(s) of the 
network on which the mobile server terminal is connected. 

The access request signal transmitted by the client terminal is preferably of 
the type belonging to the group including at least: 

an SMS message; 

an e-mail message; 
and includes a list of predetermined parameters. 

The list of predetermined parameters advantageously includes at least 
parameters of the type belonging to the group including at least: 

an IP address for identification of the first public proxy server at the origin 

of the access request signal; 

a communication port number for additional identification of the first 
public proxy server at the origin of the access request signal; 
at least one key for securing the communication initialisation initialization 
request step. 

In a preferred embodiment of the invention, the list of predetermined 
parameters also advantageously includes at least one additional parameter 
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corresponding to a unique call number of the second server terminal, when the 
access request signal is an SMS message, and/or corresponding to the type of the 
communication tunnel security protocol 

In an alternative of the preferred embodiment of the invention, the list of 
5 predetermined parameters also includes at least one additional parameter 
corresponding to an e-mail address of the second server terminal, when the access 
request signal is of the e-mail message type. 

The security key is preferably a negotiation and/or encryption key. 

In a preferred embodiment of the invention, the communication tunnel 
10 established between the client terminal and the mobile server terminal 
advantageously includes HTTP-type authentication means. 

The communication tunnel established between the client terminal and the 
mobile server terminal advantageously includes secure data transmission means of 
the type using at least: 
15 - the IPSEC protocol; 

the communication tunnel encryption protocol. 

Another embodiment of the The invention afee advantageously relates to a 
device for communication and/or radiocommunication between at least one client 
terminal and one mobile server terminal, characterised in that it implements the 
2 0 aforementioned method for access, by at least one client terminal connected to a 
first communication network, to the data and/or services of a server terminal 
connected to a second communication network, wherein the first and second 
networks can cohabit or form a single network. 

Also advantageously, the method according to an embodiment of the 

2 5 invention is applied to a variety of fields belonging to the group including at least: 

wireless applications using Web services; 

on-board telemedicine applications enabling a doctor to regularly access 
the mobile telephone serving as a mobile server terminal, so as to access 
and monitor the data of a patient, who is the owner of said mobile 

3 0 telephone; 

distributed interactive applications of the type including at least: 
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on-board collaborative work applications on communicating 
mobile terminals. 

List of figur e s 

5 Other features and advantages of th e invention will become more clear 

from the following description of a preferred embodiment, given by way of a 
simple illustrative and non-limiting example, and the appended drawings^** 
which:, . 

BRIEF DESCRIPTION OF THE DRAWINGS 
10 Figure figur e 1 shows the current situation of the prior art relating to the 

impossibility for a client terminal (stationary or mobile) connected to the Internet, 
to access a mobile server terminal of a PLMN public land mobile network 
protected by at least one firewall and at least one translator for translating public 
network address into private network addresses (NAT for Network Address 
15 Translator). This figur e is d e scrib e d in d e tail in th e prior art s e ction of this 
docum e nt; 

Figure figur e 2 shows the various technical components and the various 
steps for initialisation initialization of a communication session occurring in the 
device and the method according to an embodiment of the invention, 

2 0 respectively[[;]]. 

Figure figur e 3 is a diagram of sequences showing the various steps of 
initialisation initialization of a communication session leading to the opening of a 
communication tunnel between a client terminal of a first communication network 
and a mobile server terminal of another communication network[[;]]. 
25 Figure figur e 4 shows the diagram of communication between a client 

terminal of a first communication network and a mobile server terminal belonging 
to a second secure private network, following the initialisation initialization of a 
communication session and the opening of a communication tunnel passing 
through the firewall and the address translator of said private network, by means 

3 0 of the method according to an embodiment of the invention. 
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Figures 2 to 4 ar e describ e d in d e tail in tho description of a pref e rr e d 
embodiment of th e inv e ntion. 
Summary of th e g e neral principl e of th e invention 

DETAILED DESCRIPTION OF ILLUSTRATIVE EMBODIMENTS 
5 The term wireless application refers, according to a commonly accepted 

definition, to any type of real-time on-board applications requiring, for 
communication, a connection to a wireless and/or mobile network, such as a 
GSM, GPRS, and/or UMTS network, for example, other than mobile telephone 
and "hands-free" applications. 
10 One or more embodiments of the invention relate to mobile server 

terminals executing such wireless applications intended to make various types of 
information and/or different types of service accessible to other stationary and/or 
remote mobile clients. These different types of services can either be specific and 
relate to only a restricted group of individuals, or be general and/or public, and 
15 thus be potentially accessible to any individual (Web page consultation on the 
Internet, for example). 

Thus, an embodiment of the invention relates in particular, but not 
exclusively, to access by a stationary or mobile client terminal to a mobile server 
terminal, in order to use services and/or consult or update data, made available by 
20 the mobile server terminal. 

By way of an illustrative and non-limiting example, an embodiment thus 
a pplies in particular but not exclusively to fields as varied as: 
z the automotive industry; 

= point-to-point applications such as machine-to-machine (M2M) 

25 a pplications; 

z telemedicine applications on-board mobile terminals; 

z the consultation of Web pages made available by a mobile server terminal. 

An embodiment of the The invention th e r e for e aim s to provides a method 

for access to the services or data of a mobile server terminal of a public land 
3 0 network by means of a client terminal (stationary or mobile) connected to a 

different communication network, such as the Internet. Such a method is based in 
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particular on the use of an SMS (Short Message Service) message or an e-mail 
message by the client terminal, in order to request the initialisation initialization 
of a communication session with said mobile server terminal. The initialisation 
initialization of such a session results in particular in the establishment of a 
5 communication tunnel between the client terminal and the mobile server terminal, 
which securely passes through the firewall and the network address translator 
(NAT). 

Various embodiments of the invention can be technically envisaged, one 
of which is described in greater detail below. 

10 Pref e rred embodim e nt of th e inv e ntion 

fa-a A preferred embodiment of the invention , th e t e chnical solution 
according to the inv e ntion is based on an original approach making it possible to 
authorise, for the purpose of security, the initialisation initialization of a 
communication session between a mobile server terminal of a public land network 

15 (PLMN) and a client terminal of another network, as if the client terminal 
belonged to said public land network. 

This approach is based in particular on a relevant and original use of SMS 
(Short Message Service) messages including a set of parameters, in order to 
directly transmit to the proxy server of said public land network a request for 

2 0 initialisation initialization of communication with a previously identified mobile 
server terminal, which thus makes it possible to overcome the problem according 
to the prior art associated with the transmission of a TCP/IP request. Indeed, any 
request of this type for initialisation initialization of a communication session with 
a mobile terminal of a PLMN would in every case be blocked by the firewall and 

25 the network address translator of said PLMN. 

The method according to an embodiment of the invention advantageously 
relates to the initialisation initialization of a communication session by the client 
terminal with the mobile server terminal, and the establishment of a 
communication session by opening a direct communication tunnel between the 

30 client terminal and the server terminal. The opening of such a direct tunnel thus 
enables the client terminal to consult information made available by the server 
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terminal and/or to use and interact with all or some of the services of the server 
terminal. 

As shown in figures 2 and 3, the communication initialisation initialization 
step includes at least the following series of steps: 

step A: sending a first TCP (Transmission Control Protocol) request 20, 30 
from the client terminal 200, 300 to a domain name server 201, 301 ; 
step B: reception by the client terminal 200, 300 of a response 21, 31 to the 
first request 20, 30, which contains at least one set of predetermined 
parameters for connection to a first public proxy server 202, 302 belonging 
to the first communication network 210; 

step C: connection 22, 32 of the client terminal 200, 300 to the first public 
proxy server 202, 302, by means of the predetermined parameters, of the 
IP address and/or communication port number type; 
step D: transmission by the first public proxy server 202, 302 of a request 
23, 33 to initialise a communication session to a second private proxy 
server 203, 303 belonging to the second communication network 211 in 
the form of an access request signal; 

step E: sending a second TCP connection request 24, 34 by the second 
private proxy server 203, 204, to a predetermined communication port 35 
of the mobile server terminal 204, 304; 

step F: transmission by the mobile server terminal 204, 304 of an 
acknowledgement 35 of the second TCP connection request 24, 34 to the 
second private proxy server 203, 303; 

step G: transmission of a third TCP connection request 36 by the second 
private proxy server 203, 303 to a predetermined communication port 305 
of the first public proxy server 202, 302; 

step H: transmission by the first public proxy server 202, 302 of an 
acknowledgement 37 of the third TCP connection request 36 to the second 
private proxy server 203, 303; 
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step I: transmission by the first public proxy server 202, 302 of an 
acknowledgement 38 of the first TCP connection request 20, 30 to the 
client terminal 200, 300. 

Thus, as shown in figure 4, the series of these various steps makes it 
5 possible to initiate a communication session and to establish the opening of a 
direct communication tunnel 40 between the client terminal 41 and the mobile 
server terminal 42. In the method according to an embodiment of the invention, 
the communication tunnel 40 thus opened passes through the firewall(s) 43 and 
network address translators 44 for securing the private PLMN network 45 on 
10 which the mobile server terminal 42 is connected. The client terminal 41 is then 
capable of directly communicating, in point-to-point mode 46, with the mobile 
server terminal 42 and of using the services or data made available by the latter. 

It is understood that, in figure 3, the communication ports referenced 35 
and 305 are shown by way of a non-limiting example, and other communication 
15 port numbers can be used indifferently depending on the network configurations 
encountered. 

Such a method according to an embodiment of the invention thus makes it 
possible for any client terminal of a communication network, such as the Internet, 
for example, to connect to a mobile client terminal of a PLMN public land 

2 0 network, as if it actually belonged to this public land network secured by firewalls 

and network address translators (NAT). 

Moreover, it is important to emphasise that the sequence of steps for 
initiali s ation initialization of a communication session can be secured by 
encryption means with one or more public and private keys. Indeed, it is 
25 technically possible to consider encapsulating and encrypting predetermined 
parameters contained in the SMS message making it possible to establish the 
opening of a communication session and the associated communication tunnel. 

In an alternative of the preferred embodiment mentioned above, the client 
terminal does not transmit an SMS directly to the private proxy server of the 

3 0 PLMN public land network, but transmits, to this private proxy server, an e-mail 

message secured by encryption means, which contains at least the same 
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information for requesting the establishment of the communication session as that 
contained in the SMS message of the aforementioned preferred embodiment: 

an IP address for identification of the first public proxy server at the origin 

of the access request signal; 
5 a communication port number for additional identification of the first 

public proxy server at the origin of the access request signal; 

at least one security key for the communication initialisation initialization 

request step. 

In the two embodiments of the invention mentioned above, the list of 

10 predetermined parameters also includes at least one additional parameter 
corresponding to a unique call number of the second server terminal, when the 
access request signal is an SMS message, and/or corresponding to the 
communication tunnel security protocol. 
Advantag e s of th e solution according to th e inv e ntion 

15 The method and device for access, by at least one client terminal 

connected to a first communication network, to the data and/or services of a 
mobile server terminal connected to a second highly-secure communication 
network, as proposed by an embodiment of the invention, have a number of 
advantages, of which a non-exhaustive list is provided below: 

20 - improvement of the convergence between point-to-point applications, 
more commonly known by the acronym M2M machine-to-machine and Internet 
applications and/or Web services; 

the possibility of introducing new wireless applications or new value- 
added services to mobile servers. Such applications may in particular concern, by 

25 way of a non-limiting example, telemedicine. Indeed, an embodiment of the 
invention makes it possible to consider new telemedicine applications that would 
enable, for example, a diabetic patient to directly indicate his glycaemia over his 
mobile telephone, and the doctor must simply perform a secure query of the data 
of his patient over the mobile telephone of the latter, which serves as a mobile 

30 server terminal. 
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One or more embodiments of the invention provide a technique making it 

possible to communicate with a mobile server terminal from a first public land 
network (PLMN), from a stationary or mobile client terminal of a second public 
land network, in spite of the aforementioned technical security constraints of said 
5 first network. 

In other words, an embodiment of the invention provides a technique 

making it possible to access the services and/or information of a mobile server 
terminal of a first public land mobile network of an operator, from a stationary or 
mobile client terminal not necessarily belonging to the same first network. It 
10 should be noted that the formulation of this problem, which also is contrary to the 
conventional practice of a person skilled in the art, is, per se, a part of an 
embodiment of the invention. 

An embodiment of the invention provides such a technique that does not 

use the conventional connection methods of the prior art essentially based on 
15 TCP/IP request exchanges in order to establish a communication session with a 
mobile server terminal, from a client terminal. 

An embodiment of the invention provides such a technique that can 

integrate various levels of security, in terms of initialization of a communication 
session with a mobile server terminal of a first land communication network, and 
20 in terms of access to the services and/or information of said mobile server 
terminal, from another stationary or mobile terminal not belonging to the same 
first network. 

An embodiment of the invention further provides such a technique that 

also makes it possible to overcome the technical security constraints of the prior 
25 art mentioned above in the establishment of a communication session between a 
mobile server terminal belonging to a first public land network fPLMN) and a 
client terminal belonging to another network, but wanting to access or use the data 
and/or services of said mobile server terminal. 

An embodiment of the invention yet further provides such a technique that 

30 promotes the technical convergence between wireless or mobile M2M 
applications and Internet services. 
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An embodiment of invention provides such a technique that is simple and 

inexpensive to implement. 

Although the present invention have been described with reference to 
preferred embodiments, workers skilled in the art will recognize that changes may 
5 be made in form and detail without departing from the spirit and scope of the 
invention. 
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METHOD AND DEVICE FOR ACCESSING A MOBILE SERVER 
TERMINAL OF A FIRST COMMUNICATION NETWORK BY MEANS 
OF A CLIENT TERMINAL OF ANOTHER COMMUNICATION 

NETWORK 

ABSTRACT OF THE DISCLOSURE 
A method and apparatus are provided for enabling at least one client 
terminal, which is connected to a first communication network, to access the data 
and/or services of a mobile server terminal, which is connected to a second 
communication network. The first and second networks can coexist on or form a 
single network. One such method includes at least the following steps: a 
communication session is initialized by the client terminal with the mobile server 
terminal; and the communication session is established by opening a direct 
communication tunnel between the client terminal and the server terminal. In this 
way, the client terminal can consult the information made available by the server 
terminal and/or the client terminal can use and/or interact with all or part of the 
services of the server terminal. 



